mirror of
https://github.com/UNITRONIX/BetterDesk.git
synced 2026-09-10 09:35:39 +00:00
UNITRONIX
bbf839754e
Add multiple security hardenings across the server and web console: enforce proof-of-possession for /ws/bd-mgmt using Ed25519-signed headers with timestamp/nonce and replay protection (public key binding, canonicalization, storage, verification, and tests); remove legacy API key query param and config-table fallback in favor of scoped api_keys (migrate bootstrap key into api_keys); tighten WebSocket origin handling for relay and signal servers to allow only localhost origins by default unless an explicit allowlist is set; update auth middleware public paths and test helpers to use X-API-Key header; add ensureScopedAPIKey migration and related helpers; add a GitHub Secret Scan workflow and an audit report. Misc: propagate audit logging on bd-mgmt connect/disconnect and validate enrollment public keys during device register.
57 lines
1.4 KiB
JSON
57 lines
1.4 KiB
JSON
{
|
|
"name": "betterdesk-console",
|
|
"version": "2.3.0",
|
|
"description": "BetterDesk Console - Professional Web Management Panel for RustDesk Server",
|
|
"main": "server.js",
|
|
"scripts": {
|
|
"start": "node server.js",
|
|
"dev": "node --watch server.js",
|
|
"test": "jest --detectOpenHandles --forceExit",
|
|
"test:ci": "jest --detectOpenHandles --forceExit --ci",
|
|
"i18n:check": "node scripts/i18n-check.js",
|
|
"i18n:fix": "node scripts/i18n-check.js --fix"
|
|
},
|
|
"keywords": [
|
|
"rustdesk",
|
|
"betterdesk",
|
|
"remote-desktop",
|
|
"management-console"
|
|
],
|
|
"author": "UNITRONIX",
|
|
"license": "Apache-2.0",
|
|
"dependencies": {
|
|
"axios": "^1.7.7",
|
|
"bcrypt": "^5.1.1",
|
|
"better-sqlite3": "^11.3.0",
|
|
"cookie-parser": "^1.4.6",
|
|
"csrf-csrf": "^3.0.6",
|
|
"ejs": "^3.1.10",
|
|
"express": "^4.18.2",
|
|
"express-rate-limit": "^7.4.1",
|
|
"express-session": "^1.18.0",
|
|
"helmet": "^7.1.0",
|
|
"multer": "^1.4.5-lts.1",
|
|
"otplib": "^12.0.1",
|
|
"protobufjs": "^8.0.0",
|
|
"qrcode": "^1.5.4",
|
|
"tweetnacl": "^1.0.3",
|
|
"tweetnacl-util": "^0.15.1",
|
|
"ws": "^8.19.0"
|
|
},
|
|
"optionalDependencies": {
|
|
"pg": "^8.13.0"
|
|
},
|
|
"overrides": {
|
|
"tar": "^7.5.11",
|
|
"path-to-regexp": "^0.1.13",
|
|
"brace-expansion": "^1.1.13"
|
|
},
|
|
"devDependencies": {
|
|
"jest": "^29.7.0",
|
|
"supertest": "^7.2.2"
|
|
},
|
|
"engines": {
|
|
"node": ">=18.0.0"
|
|
}
|
|
}
|